[email protected]CVE-2005-3403

HistoryNov 01, 2005 - 12:47 p.m.

CVE-2005-3403

2005-11-0112:47:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-3403

xss

atutor

web security

vulnerability

remote attackers

nvd

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the _base_href parameter in translate.php, (2) the _base_path parameter in news.inc.php, and (3) the p parameter in add_note.php.

CPENameOperatorVersion
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.4.2
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.5.1
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.4.1
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.5.1_pl1
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.4.3

CPE	Name	Operator	Version
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.4.2
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.5.1
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.4.1
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.5.1_pl1
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.4.3

References

atutor.ca/view/3/6158/1.html

marc.info/?l=bugtraq&m=113043022821049&w=2

secunia.com/advisories/16915/

secunia.com/secunia_research/2005-55/advisory/

securityreason.com/securityalert/123

securitytracker.com/id?1015165

www.osvdb.org/20347

www.osvdb.org/20348

www.osvdb.org/20349

www.securityfocus.com/bid/15221

www.vupen.com/english/advisories/2005/2228

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.9%

JSON

Related for CVE-2005-3403

cvelist1 openvas1 nessus1